RHSA-2026:6308HighCVSS 9.8

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

Published
March 31, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (5)

CVE-2025-69223 →CVE-2026-1615 →CVE-2026-25639 →CVE-2026-25990 →CVE-2026-26007 →

📋 Description

CVE-2025-69223 — aiohttp: AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb CVE-2026-1615 — jsonpath: jsonpath: Arbitrary Code Execution via unsafe JSON Path expression evaluation CVE-2026-25639 — axios: Axios affected by Denial of Service via proto Key in mergeConfig CVE-2026-25990 — pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image CVE-2026-26007 — cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

🎯 Affected products107

  • Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:0f8839e5aee29a659fc87dbe1974d52807b02232b12bfae0a9ee75f72f6822d8_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:cbed194c572c59551a2b73e61d8c3821df77d5a9ca7d2275062c439996a24eb4_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:f501719d54fc49e168385702bb0e1d8432b65f129a56a8fe184557a715956196_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:fe250f135f03aecf8489c1cee9721b9e48549e19d5a609a3d3284fe7d758a34d_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:6fd7c632b981a1b0593c6af234c4b40d1046eabebe41ce29f75e1e010e92226a_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:b8d2a7da8627fa6a020330453c9fee31ba37a8eddd2d014fafa5bf3ed838fb5e_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:c264a07ccc7020902897cc9420a76dc590431596fc74696b57e42c2cc658a3f7_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:de9acb254c64d4b5f060867ac81c3c7b92da197bd62914705f47f81c719000f9_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:299e584db6227b51630ff777864b19113e8a1ea8100aa5c1bde092f730f35911_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:3aae092b74e73969f4328e406f804297e44130fea3232db3403db98463e42d9c_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:b77247eccd37c9bc29631142605c6fab3af9d23ebf82b43f049664e44193d377_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:f1eb81b968bdee5bbfa48e25718ac574bdda09c2acf726d9f058e0643585d59d_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:009336407c386ffb1f5f1bdb7a38256e73b8b2ec97036f8ab84e7293f517ef8e_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:82e4da659d4bbf036bafee5f598602ec32b7b5f8d3d595287dcf418288bf2147_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:8ee6e0938cc2189984009da95ebd6fb4f5946cf9e1f7ef7aae8d6f40dfc7ab36_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:90d90e31d0afe833778743baf4eb3527402a65c30fdcce149ff8d4820faa3781_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:34bfde79221d2f824177f72d68a877b63bfe88b1f0562741a2dc212f83cb4e62_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:c25356366526086b2e85274793b8e9dadf1a04d35515087d4421c74bb9b4bacf_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:c5923a2649845cc20cdc2d015442d8007e9e0f77522d652d8af389437681c4ed_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:d91f808a230d11c3b998cbd703fd8fd043188164f61962b5518cda91ad19712b_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:0d79e8c5f3f36c290006c0adbe7c14f57bad10566017f005ae4073905b170136_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:57bf7919da3de08961e4c151b08dab1c756353a4040d0dd66feb72fcfe1cc8ce_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:6d0a4b9c41713e592707a1b93d48f197977bf9eb05aa5e87a083976720061cbb_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:c6d21fc02716334ab7f6c48ba7d102965d197209c5a9fd3b41a6ea65b5da0055_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:48f4971662ddb841e25bb610f72ef5f37eddf482b117786595d80d0931448236_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:6ec99dbde70c05dc5fbd64f81779f75ca8a131c0d3865f1be318a4cd8152ed33_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:783723cc28521153aef6aeaee7786f8bb87e01ef738b90b8b5fb2f2b2fb6c780_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:7c13d95770002e16dbd5dc86ea82f6fc5e70828582b928d9e3388ecded90b67a_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/de-minimal-rhel8@sha256:7188e3f507cdaa346ed930c158379a67104dbdc74535a2b5a541cea60c03a123_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • +77 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5#Upgrading Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (9)